Scope
Security reports should be sent to security@trustdag.com until a formal bounty portal is published.
Reports involving real harm, extortion, public exploitation, or unauthorized access outside permitted testing boundaries are not accepted as responsible disclosure.